Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,669
Erlang
34
GitHub Actions
26
Go
2,261
Maven
5,000+
npm
3,910
NuGet
704
pip
3,680
Pub
12
RubyGems
915
Rust
943
Swift
38
Unreviewed advisories
All unreviewed
5,000+

128,852 advisories

Loading
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating... Moderate Unreviewed
CVE-2024-37045 was published Nov 22, 2024
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating... Moderate Unreviewed
CVE-2024-37048 was published Nov 22, 2024
Substance3D - Stager versions 3.0.2 and earlier are affected by an out-of-bounds read... Moderate Unreviewed
CVE-2024-52998 was published Nov 22, 2024
An issue in Instrument Cluster KIA Seltos Software v1.0, Hardware v1.0 allows attackers to cause... Moderate Unreviewed
CVE-2024-51072 was published Nov 22, 2024
The Sky Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure... Moderate Unreviewed
CVE-2024-9542 was published Nov 22, 2024
The LSX Tour Operator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG... Moderate Unreviewed
CVE-2024-9851 was published Nov 22, 2024
Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in... Moderate Unreviewed
CVE-2021-38119 was published Nov 22, 2024
Possible improper input validation Vulnerability in iManager has been discovered in OpenText™... Moderate Unreviewed
CVE-2021-38118 was published Nov 22, 2024
Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.5... Moderate Unreviewed
CVE-2021-38134 was published Nov 22, 2024
: Insufficient Logging vulnerability in OpenText Secure Content Manager on Windows allows Audit... Moderate Unreviewed
CVE-2024-10863 was published Nov 22, 2024
A vulnerability was found in AVL-DiTEST-DiagDev libdoip 1.0.0. It has been rated as problematic.... Moderate Unreviewed
CVE-2024-11588 was published Nov 22, 2024
A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the... Moderate Unreviewed
CVE-2024-11587 was published Nov 22, 2024
Microsoft Edge (Chromium-based) Spoofing Vulnerability Moderate Unreviewed
CVE-2024-49054 was published Nov 22, 2024
A path traversal vulnerability has been reported to affect several QNAP operating system versions... Moderate Unreviewed
CVE-2024-37043 was published Nov 22, 2024
A buffer copy without checking size of input vulnerability has been reported to affect several... Moderate Unreviewed
CVE-2024-37041 was published Nov 22, 2024
A buffer copy without checking size of input vulnerability has been reported to affect several... Moderate Unreviewed
CVE-2024-37044 was published Nov 22, 2024
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If... Moderate Unreviewed
CVE-2024-32767 was published Nov 22, 2024
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If... Moderate Unreviewed
CVE-2024-32769 was published Nov 22, 2024
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If... Moderate Unreviewed
CVE-2024-32768 was published Nov 22, 2024
A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If... Moderate Unreviewed
CVE-2024-32770 was published Nov 22, 2024
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating... Moderate Unreviewed
CVE-2024-37042 was published Nov 22, 2024
The F4 Improvements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG... Moderate Unreviewed
CVE-2024-9442 was published Nov 22, 2024
D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the host_ip parameter... Moderate Unreviewed
CVE-2024-52755 was published Nov 22, 2024
smol-toml has a Denial of Service via malicious TOML document using deeply nested inline tables Moderate
GHSA-pqhp-25j4-6hq9 was published for smol-toml (npm) Nov 22, 2024
TheKodeToad
Sentry improper error handling leaks Application Integration Client Secret Moderate
CVE-2024-53253 was published for sentry (pip) Nov 22, 2024
Christinarlong
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database